Role Description

We are seeking an experienced Senior/Lead Consultant specialising in IT Governance, Risk, and Compliance (GRC) to join our team. In this hybrid role, you will manage and oversee IT GRC activities, ensuring alignment with industry standards and regulatory requirements. Your expertise will contribute to building secure, compliant, and resilient IT systems.

Key Responsibilities:

1. Governance, Risk, and Compliance:

• Conduct comprehensive risk assessments and identify potential vulnerabilities.
• Develop and implement IT policies, procedures, and risk mitigation strategies.
• Provide expert guidance on regulatory compliance and industry best practices.

2. Project Lifecycle Involvement:

• Interpret and define security requirements for IT systems.
• Design and implement robust system security architectures.
• Evaluate risks from deviations and non-compliance issues, recommending solutions.
• Support security acceptance testing and continuous security assessments.

The Candidate shall possess the following professional qualification and experience:

a. minimum six (6) years of experience in designing, implementing and testing system security architecture of similar scale; OR

b. minimum two (2) years of experience in designing, implementing and testing system security architecture of similar scale – plus having attained at least one (1) of the following:

i. Information Security Masters degree from U.S. National Centres of Academic Excellence in Cyber Defence (NSA/DHS CAE) or those certified by U.K. National Cyber Security Centre (GCHQ’s NCSC); or

ii. CREST Registered Technical Security Architect (CRTSA); or

iii. Information Systems Security Architecture Professional (CISSP-ISSAP).

Minimum Qualifications

• Strong knowledge of IT governance, risk management, and compliance frameworks
• Experience in conducting risk assessments and developing risk mitigation strategies
• Experience in Network and System Security Engineering and Enterprise Security Architectural Design
• Familiar with relevant regulatory requirements and industry standards
• Excellent problem-solving and analytical skills
• Strong communication and interpersonal skills
• Ability to work independently and collaboratively in teams
• Certifications such as CISSP and CRISC are highly preferred
• Minimum of 5 years of experience in IT governance, risk, and compliance roles
• Bachelor's or master's degree in IT, Computer Science, or a related field
• Security clearance (CAT 1 or 2) required for government project

• According to the company’s long-term vision, formulate and integrate cybersecurity strategies into a companywide strategic plan by collaborating with cross-functional teams to design and implement secure infrastructure and application solutions
• Understand expectations of the company regarding continuous growth, establish concrete goals, and create mid-term strategies to achieve goals
• Drive the Global Cyber Defense Strategy, maintain ready forces and capabilities to conduct cybersecurity operations
• Anticipate future internal and external trends and implications and create appropriate cybersecuritymeasures
• Build understanding of cyber threats in each level. Develop detection & protection measures continuously, lead the technical solution implementations to be prepared to defend Santen from disruptive or destructive cyberattacks
• Ensure the security incident management process are executed properly by all parties by tracking the resolution process and making sure the known issues are addressed according to risk management methodology
• Lead the monthly operational meetings between SOC team and Santen, improve the overall process and ensure the KPIs are achieved
• Verify and continuously improve the Recovery Process performed during or after a security incident to ensure that it meets business requirements and is effective and practical
• Manage the Major Security Incident Management process, under Global Head of Information Security,and guide/train different stakeholders, including SOC team, DIT leaders and technical managers
• Support the Disaster Recovery and Business Continuity framework, initiatives, and execution
• Improve Santen’s cybersecurity maturity level by increasing overall awareness and providing security advice/insights on technical requirements to DIT and non-DIT leaders (both Information Systems and Industrial Control Systems global leaders)
• Lead global programs & project implementations, planning the delivery of risk mitigation solutions and answering technical questions, reviewing current security measures, recommending enhancements, and identifying areas of security weakness
• Perform technical risk assessments (IT & OT) of all new global solutions and third parties, identify potential gaps and make sound recommendations for mitigating the risks on a global scale
• Implement the Internal Cybersecurity Framework to support the state-of-art technologies and Santen regulatory and organizational requirements (ISO 27001, NIST, Data Privacy Laws)
• Implement and improve the Global Vulnerability Management Program focused on reducing the risk presented by vulnerabilities in Santen environment by continuously performing three core steps: Discovery, Reporting and Remediation
• Guide the technical teams (Global IT Infra, Regional IT Infra and Application teams, critical third parties) to make sure vulnerabilities are mitigated on a timely manner, perform the escalations on time
• Manage the global vulnerability scan and penetration test exercises
• Manage the relationship and contracts with the external suppliers to obtain the best value for Santen
• Determine the need for covering the risks on company’s threat landscape and continuously search for the most strategic product & services to deliver the needed capabilities
• Keep track of changes in Santen’s business, threat landscape, product innovations and rebalance according to the risk appetite
• Build and maintain robust partnerships with market leaders (e.g. Gartner, ISF) to deter shared threats in our industry
• Build close partnerships and implement efficient internal processes with business and technical teams to detect and mitigate threats before they can be exploited
• Lead projects to implement new cybersecurity solutions or frameworks by developing business cases or conducting opportunity studies when needed
• Understand projects and services specificities in a multi locations environment with many remote management situations
• Ensure there are continuous PDCA (Plan, Do, Check and Action) cycles to improve services and solution in place in relations with KPIs/SLAs in place or to be developed
• Maintain good working relationships with internal stakeholders globally, especially with Digital & IT management
• Support his/her Digital & IT peers in charge of infrastructure, service operations and business applications to provide the right information security advice or solutions allowing them to provide the contributions to business domains
• Manage the suppliers by defining clear guidelines and objectives, relying on KPIs in coordination with the governance in place. Challenge organization and governance in place to verify the company is obtaining best value and that vendors are meeting our information security needs and requirements
• Develop and own the budget proposal for the cybersecurity domain in accordance with the company guidance on budget directions
• Ensure financial governance and efficient use of resources to meet business objectives.
• Execute the budget in respect of its objectives in terms of services to operate, solutions to deliver
• Perform ongoing security maturity level assessment to evaluate the effectiveness of security controls and explain the effectiveness to project teams, business stakeholders and senior management

We are looking for a skilled IT Security Engineer to join our client for a 1-year direct contract. The successful candidate will bring strong expertise in information security and hands-on experience managing security projects from start to finish.

Responsibilities:

• Lead and execute security projects across various domains, including endpoint, network, and application security.
• Implement and manage security tools, such as Web Proxy, Endpoint Protection, Email Security, and Vulnerability Scanners.
• Assess system security through threat modeling and propose effective solutions.
• Explore and integrate emerging security technologies to strengthen the organization’s security posture.
• Collaborate with teams to ensure secure deployment and operation of cloud environments.

Requirements:

• Bachelor’s degree in Computer Science, Computer Engineering, Information Security, or a related field.
• 5 years experience in IT Security, with deep expertise in one or more security domains.
• 3 years hands-on experience in end-to-end IT security projects or project delivery.
• Familiarity with security tools and frameworks.
• Security certifications (CISSP, CISM, AWS Certified Security, etc.) are highly desirable.
• Experience with cloud security is an added advantage.
• Thrives in fast-paced and demanding environments.

This role is a great opportunity to work on impactful security projects in a dynamic environment.

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities, and shareholders every day.

One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We’re devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being.

Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization.

Working at Bank of America will give you a great career with opportunities to learn, grow and make an impact, along with the power to make a difference. Join us!

Your background

• Familiarity with Cyber Security and Information Technology.
• Strong problem-solving and critical thinking skills.
• Effective communication and interpersonal skills.
• Basic knowledge in Cloud Security/Monitoring is a bonus.

What you can expect

As a Senior Cyber Security Analyst, you will play a crucial role in the team’s daily operations involving threat monitoring and detection. Collaborating with a dynamic team, you will intake cybersecurity related requests from internal and external entities that require triage, remediation, or escalation.

What you will do

• Perform deep dives into suspicious security events by collating data from various sources, working across multiple GIS Control Teams, to determine if a critical system or data has been impacted.
• Must be able to identify, analyze and address problems to resolve issues whenever possible in way that minimizes negative impact and risk to the organization.
• Ability to work independently with initiatives and minimum supervision.
• Strong analytical skills/problem solving/conceptual thinking.
• Ability to work with Technical and Non-Technical business owners.
• Assist with internal projects and development efficiently.
• Must be comfortable in delivering messages across a wide spectrum of individuals having varying degrees of technical understanding.
• Must have strong leadership skills and qualities enabling collaboration with peers and various levels of management.
• Assist in supervision of teams and provide mentorship to junior analysts to equip them with basic skills needed during operation support.
• Actively participate and be involved in the evolution of process/procedure and tools used within the team.
• Learn and perform monitoring activities with the use of Cloud Technologies.
• Perform ad-hoc reporting and investigation as required.
• Perform Quality Assurance (QA) check against various queues.
• Willing to work weekend on a rotational shift basis.
• Perform real-time analysis and trending of security log data from various security devices and systems.
• Maintain data sources feeding the log monitoring system, develop and maintain detection and alerting rules.
• Respond to user incident reports and evaluates the type and severity of security events.
• Execute initial triage of incidents to rule out false positives.
• Identify recurring security issues and risks and develops mitigation plans and recommends process improvements.
• Interpret and apply security policies and procedures.
• Establish escalation processes for security incidents and develops contingency plans and disaster recovery procedures.

• Global Company
• Great Corporate Culture

About Our Client

Our client is a global company with about 5,000 employees in over 50 countries. They enable a smarter, safer world by creating innovative solutions for improving security and business performance. They are a network technology company and industry leader offering solutions in video security, access control, audio systems and analytics applications.

Job Description

• Continued Business Growth through working closely with the partner accounts & SIs
• Account planning and accurate forecasting from researching and analyzing
• Develop clear business plans for the accounts
• Co-create solutions for identified markets thereby developing the project pipeline
• Setting annual targets on each account and continuously follow up on KPI's
• Initiate and participate in activities that influence end-users and generate demand e.g. trade shows, seminars, technical training and webinars
• Ability to prepare accurate and timely sales reports for all projects

The Successful Applicant

• At least 5 years of experience in Security Technologies with about 3 years selling to Partners
• Experience working with indirect sales, in a technical sales position from the IT or Security industry
• Proven experience with networking, IP-based technologies, and security applications is a plus

What's on Offer

This is a chance to join a global leader in Security Technologies. They offer competitive remuneration and room for growth to take your career to the next level.

Contact

Antoine Ratajczak (Lic No: R1985336 / EA No: 18C9065)

Quote job ref

JN-122024-6624074

Phone number

+65 6416 9849

Michael Page International Pte Ltd | Registration No. 199804751N

The Role

As Senior SOC Analyst (Tier-2), a threat hunter, you will work proactively to seek out weaknesses and stealthy attackers, conduct vulnerability assessments and deal with results. You will also remediate severe incidents from Security Analyst (Tier-1) to assess the impact and affected systems’ scope and collect data for further analysis.

Job Responsibilities

• Lead proactive hunting and analysis against the dataset (e.g., alerts, logs, etc.) and reverse engineering as needed to support Security Operation Centre (SOC) investigations and proactive threat detection and prevention.
• Coordinate and facilitates in-depth analysis, trending, and root cause analysis of security events/incidents while creating and maintaining processes and procedures.
• Perform advanced research on threats, vulnerabilities and potential threat vectors and work with multi-disciplines to improve prevention and detection methods.
• Act as the technical subject-matter-expert for SOC related topics or during incidents,
• Develops and documents the SOC procedures and processes based on industry best practices and internal requirements.
• Support or lead projects to improve SOC effectiveness, advancing technical capabilities on pace with the latest threats.
• Support and integrate with incident response, threat intelligence, and overall security strategy as needed.
• Perform other essential duties as assigned.

Job Requirements

• Bachelor’s degree in IT or equivalent with min. 5 years of working experience and has 3 years of experience leading a SOC team.
• Strong knowledge in networking / major internet protocols and security concepts
• Min. 3 years of experience in cyber incident response and/or Security Operations center in an enterprise environment.
• Min. 2 years of experience with standard enterprise security tools (e.g., Database Activity Monitoring, Zero Trust Segmentation, Security Information & Event Management, Intrusion Detection Prevention System, Endpoint Detection & Response, etc)
• Min. 2 years of operational experience with Splunk or similar log aggregation/analysis platforms
• Expert execution of investigative concepts for escalated incidents to determine the impact and root cause.
• Strong foundation in security threat and attack countermeasure.
• Possess analytical and problem-solving skills, with the ability to manage multiple tasks in a fast-paced environment.
• Hands-on experience in SIEM and intrusion detection analysis as well as application layer protocols.
• Have experience in security related areas. Especially experience and expertise in security incident detection and threat intelligence are proven to be extremely useful.
• Advanced understanding of various operating systems and web technologies with professional security certifications would be a plus.
• Experience in multiple domains within IT or Information Security (e.g. Identity and access management, IT infrastructure operations, Key management, system administration etc.)
• Meticulous, team player, flexible, proactive and positive attitude
• Strong sense of responsibility and initiative.
• Excellent communication and interpersonal skills.
• Work Location: One@ChangiCity

Job Description

You will be a member of the Group Information Security Team responsible for initiating, implementing, and maintaining security products and solutions to support enterprise security.

Key Responsibilities:

•Subject matter expert (SME) for the security systems owned by the Information Security Team.

•Ensure security systems are utilized to their maximum capabilities.

•Plan, identify, assess, design, operationalize, and maintain multiple security-related software and/or hardware.

•Recommend and drive cyber security solutions and initiatives to improve the cyber security of the organization.

•Prepare RFQ and evaluation criteria. Proof of concept (POC) during product evaluation. Liaising with vendors to implement security solutions.

•Provide security consultancy, technical guidance, expertise, solutions, and education.

•Advise infrastructure teams on security design that is relevant and fit for purpose.

•Identify and assess cyber risks in the IT infrastructure environment.

•Review firewall requests.

•Keep up to date on emerging security threats and vulnerabilities on new platforms adopted by the SIA Group and propose mitigating controls.

•Any relevant ad-hoc duties. Manage individual project priorities, deadlines, and deliverables.

•This is an individual contributor role. Deliver tasks with minimal supervision.

•Provide AUDIT support such as PCI-DSS, and Cyber Maturity Assessment.

•Strong communication skills.

•Coordinate and Deploy SIA Group/GIT cybersecurity initiatives in Scoot.

Requirements:

•Degree in IT or related field, with at least 5 years in information security, especially in the cybersecurity space.

•Professional security certifications (SANS, CISSP, CEH, OSCP, CISA, etc) preferred.

•Experience in security products POC and RFQ.

•Prior experience in implementing and maintaining any of the tools for EDR, XDR, SOAR, SIEM, UEBA, PAM, AM, etc., and/or network security. Able to review firewall requests.

•Technical proficiency in one or more of the following security areas: network design, zero trust, Internet of Things, cryptography, etc.

•Familiar with common web/mobile application vulnerabilities and technical knowledge to address and mitigate vulnerabilities. Any prior vulnerability management experience is preferred.

•Knowledge of cyber security threats, vulnerabilities, hacking, exploit methods, etc.

•Strong oral, written, presentation, and inter-personal skills.

•Possess a positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.

•Able to work independently and in a team-oriented, collaborative environment.

What you will be working on:

● Innovate and Build: Design and develop new, cutting-edge features for WebOrion®,

enhancing its ability to safeguard against web and API vulnerabilities.

● Pioneer AI Security: Research and create advanced modules for our next-gen AI firewall

that defends against AI-driven cyber threats.

● Full-Stack Impact: Manage and maintain databases, APIs, software, servers, and cloud

infrastructure.

● Agile Development: Contribute to an agile lifecycle—coding, debugging, testing, deploying,

and improving software releases.

● Customer-Centric Support: Provide top-notch technical support for our global enterprise

customers.

What we are looking for:

● Bachelor’s or Master’s Degree in Computer Science/ Engineering, Information Technology or

equivalent

● Hands on experience with Docker and programming languages such as Golang or Python.

● Interest in Security for AI. Defending against the next wave of AI attacks.

● Have a good understanding of RESTful APIs, databases, messaging queues, CI/CD tools

and software testing. Experience with Linux command-line and Git

● Able to write and document technical concepts

● Teamwork skills with a problem-solving attitude

● Preferably 1–2 years of relevant experience, though exceptional fresh graduates with

solid internship experience are welcome.

● Must be based in Singapore.

Why Join Us:

• Innovate for Impact: Be part of the team that's building a revolutionary AI firewall to
• defend against AI-driven threats, redefining the cybersecurity landscape.
• Global Exposure: Work with enterprise customers across ASEAN, Europe, and the
• US, gaining valuable international experience.
• Cutting-Edge Projects: Build cool cybersecurity products while working at the nexus of
• web, cloud, and AI security.
• Career Growth: Join a fast-growing company where your contributions make a real
• difference.

Interested applicants, please drop us a note at [email protected] with your CV and cover letter.

Join our fleet of island wide security officers. Trained and untrained applicants welcomed!

Details:

· Salary up to $3,075 (Even for untrained individuals)

· Bonus up to $6,000

· Permanent Day or Night Shift (*LIMITED SLOTS, FIRST COME FIRST SERVE)

· Able to choose primary job site & shift (*LIMITED SLOTS, FIRST COME FIRST SERVE)

· Candidates with no experience welcomed to apply

· NO BOND FOR TRAINED OFFICERS

· Sponsored Training

· Salary during Training

Responsibilities:

· Guarding & Patrolling

· Access Control

· Crowd Control

· Static Post for Pass Office/Visitor Management

· Incident Management & Report Writing

Posts Available:

· Non-public facing

· One Man posts

· Roving/Response Riders

Requirements:

· Singaporeans only

· Vehicle License added advantage

· Able to commit 12-hour shifts (Including Weekends and Public Holiday)

Benefits:

· Medical, dental and insurance benefits

· Staff corporate rates, discounts and recreational passes for staff and family

· High career prospect with horizontal and vertical growth!

Interested parties please feel free to send your details to 8498 6788 or click Apply.

Alternatively, walk in and quote “JAYE”

Certis Commonwealth @ 6 Commonwealth Ln, Singapore 149547

Monday to Friday, 9am to 5pm

We regret that only short-listed candidates will be notified.

• Permanent full-time role
• Basic $2650 to $3500 + Allowances + JOINING BONUS
• No bond
• Training Provided
• East (Company Transport Provided)

Job Description:

• Responding to incidents and managing security and safety systems.
• Preventing unauthorized entry into premises.
• Monitoring CCTV for suspicious activity.
• Conducting patrols and clocking duties.
• Performing access control duties.

Requirements:

• Able to commit 12 hours duty (Permanent day and/or night shift available)

Candidates are encouraged to apply this position via Apply Now button with the following information in the resume

• Work experiences and job responsibilities
• Current and Expected salary
• Reason for leaving
• Date of availability
• Education background

We regret that only shortlisted candidates will be contacted.

CHAN KAM HUI (R24125233)

EA Recruitment Pte Ltd

EA License No: 21C0492

Our client is a well-established MNC, market leader in the IT industry. Due to their current expansion plan, they are looking for a Marketing Executive to join their team, in hopes of developing the current high performing team. They are located in the West.

Responsibilities:

• Organize and manage marketing events/activities such as workshops, training sessions, conferences, and industry expos.
• Develop and maintain event budgets, ensuring costs are effectively controlled.
• Collaborate with external vendors and partners to coordinate event logistics and partnerships.
• Oversee administrative tasks related to marketing campaigns and produce regular performance reports.
• All other ad-hoc duties as assigned.

Requirements:

• Minimum Diploma in IT / Cybersecurity or other related field of studies.
• Minimum 2 years’ relevant experience.
• Proficient in Photoshop and Illustrator.

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/cv.

We regret that only shortlisted candidate will be notified.

Email: [email protected]

Recruitpedia Pte. Ltd.

EA License No. 19C9682

EA Reg. No. R23115553 (Lai Hor Yan)

Job Description

You will be a member of the Group Information Security Team responsible for responding to threats and incidents to the corporate networks, systems (on-prem and cloud) and digital assets.

Key Responsibilities:

• Act as the subject matter expert (SME) for the security systems owned by the security team.

• Recommend and drive cyber security solutions and initiatives to improve the organization's cyber security posture.

• Lead and drive major incidents towards mitigation and resolution in collaboration with multiple internal counterparts.

• Ensure excellent communication to stakeholders, providing timely and accurate updates during incidents.

• Respond to, assess, and investigate security events in collaboration with vendors.

• Coordinate with internal stakeholders such as applications, network, and infrastructure teams for investigations.

• Perform in-depth analysis and assess vulnerabilities, IOCs, cyber security intelligence, and open-source information to validate security risks and impacts, recommending appropriate countermeasures.

• Develop and maintain cyber incident response and handling playbooks for various threat scenarios.

• Recommend and implement tools to enhance detection, response, and recovery functions and overall security posture.

• Develop methodologies to identify threat adversary tactics, techniques, and procedures.

• Stay abreast of new and emerging cyber threats, attack vectors, etc., and assess their impact.

• Provide strategic guidance and oversight to vendors, ensuring adherence to agreed-upon SLAs and KPIs.

• Guide and mentor junior staff within the security operations team, providing support as needed.

• Perform any relevant ad-hoc duties as required.

Requirements:

• Degree in IT or related fields, with at least 6 years of relevant information security working experience.

• Professional security certifications (CISSP, CISA, CEH, GCIH, etc.) preferred.

• Hands-on experience with SIEM, EDR, XDR, UEBA and SOAR tools preferred.

• Strong in-depth working knowledge in Networking, Cloud, Active Directory, Windows and UNIX platforms, and Mitre framework.

• Knowledge of cyber security threats, vulnerabilities, hacking, and exploit methods, etc.

• Strong oral, written, presentation, and interpersonal skills.

• Possess a positive attitude with drive, initiative, enthusiasm, and a keen sense of urgency in resolving high-priority issues.

• Able to work independently and in a team-oriented, collaborative environment.

• Experience in guiding and mentoring junior staff within a security operations team.

• Candidates will be considered for a senior role commensurate with their experience.

Aviation Security Officer (Changi Airport)

Job Responsibilities:

• Performing of screening of passengers at designated zones
• Performing manual bag checks whenever necessary
• Using security screening equipment for screening purposes
• Performing X-ray screening of checked-in luggage
• Any other security related roles at Airport

Job Requirements:

• 1 N Levels credit OR 1 O Level OR WPLN 3 x Level 4
• Able to stand and squat multiple times as required during screenings
• Able to commit to the following working shifts:
• 4 working days with 2 days off or 5 days work with 1 day off, 12 hours permanent shift
• Singaporeans only

Join our telegram channel for more job vacancies!
https://t.me/sgjobs23C1888

Interested candidate please Whatsapp (Message) Cheralyn at 89223320

Cloud Recruitment Pte Ltd 23C1888 Cheralyn R23112542

Location: Singapore
Employment Type: Full-Time

Job Overview:

We are looking for a skilled Consultant in Application Security to lead advanced security projects, conduct penetration tests, and promote secure development practices.

Roles and Responsibilities:

• Perform comprehensive security assessments and code reviews.
• Conduct advanced penetration testing and manage vulnerability remediation.
• Collaborate with development teams to integrate secure coding standards.
• Lead security training and awareness sessions for development teams.

Qualifications and Skills:

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field.
• Proficiency in secure development lifecycle (SDLC) practices.
• Expertise in OWASP Top Ten, PCI-DSS, and compliance frameworks.
• Experience with tools like Metasploit, Fortify, or Checkmarx.
• Minimum Experience: 4+ years

Security Officers (Island-wide locations)

Job Responsibilities:

• Managing Security & Safety Systems
• Attending to any security incidents that arise and performing basic incident reporting
• Preventing unauthorised entry into the premises
• Monitoring of CCTV
• Patrolling and clocking
• Performing access control duties

Job Requirements:

• Min. Secondary 2 education
• Good communication skills
• Able to commit to the following shift patterns:
• 4 days work 1 day off /3 days work 1 day off
• 12 hours permanent shift
• Singaporeans only

Join our telegram channel for more job vacancies!
https://t.me/sgjobs23C1888

Interested candidate please Whatsapp (Message) Cheralyn at 89223320

Cloud Recruitment Pte Ltd 23C1888 Cheralyn R23112542

ST Engineering is a global technology, defence and engineering group with offices across Asia, Europe, the Middle East and the U.S., serving customers in more than 100 countries. The Group uses technology and innovation to solve real-world problems and improve lives. Our dedication to excellence and our strong track record have earned us a distinctive reputation for quality and trust as a global technology, defence and engineering group, spanning across the aerospace, smart city, defence and public security segments. Headquartered in Singapore, ST Engineering ranks among the largest companies listed on the Singapore Exchange.

Join our Cyber Team

We are an industry leader in cybersecurity with over two decades of experience, we deliver a holistic suite of trusted cybersecurity solutions to empower cyber resilience for government and ministries, critical infrastructures, and commercial enterprises. Backed by our indigenous capabilities and deep domain expertise, we offer robust cyber-secure products and services in cryptography, cybersecurity engineering, digital authentication, SCADA protection, audit and compliance.

Join our team of highly motivated individuals in the engineering cutting edge solutions that unify both cybersecurity and productivity. As our Cyber Security Product Engineer, you will join a team of specialised engineers to deploy, configure and support our indigenous and robustness cybersecurity products.

Job Description

• Participate in the product and project implementation and coordinate new installations, designs and migrations for security technology and solutions.
• Understand customer’s requirements and transform to technical control & technical solution
• Install, configure and upgrade Cyber Security Products
• Troubleshooting, diagnosing and resolving hardware, software, and other network and system problems on the customer's site
• Liaise with vendors and internal team for resolution solutioning for problems encountered.
• Monitor compliance to applicable codes, best practices, security standards and specifications for the delivery of security technology and solutions.
• Work within established configuration and change management policies to ensure awareness, approval and success of changes made to the ICT infrastructure.
• Cooperate and communicate effectively with project manager and coordinate with other project participants to deliver functional solutions and provide assistance and technical support.
• Create and maintain technical documentation for reference and reporting.
• Create, oversee and test system integration and security requirements (e.g. system integration test plan, system security acceptance test plan).
• Review findings from vulnerability assessment and penetration testing.
• You will learn system and cyber security knowledge with the team.

Requirements

• Possess 5-7 years of similar experience
• Familiar with cyber security products and project implementation
• Possess networking knowledge
• Possess basic knowledge in Linux
• Soft skills – Problem Solving, Communication and Teamwork Skills
• Singaporean only
• Work location: Jurong East

Find out more: https://www.stengg.com/cybersecurity

ST Engineering believes in fostering a culture where team members are encouraged to overcome challenges, explore new ideas, and work together to succeed. We value individuals who are determined to push beyond the boundaries, and have a thirst for knowledge, continuous learning, and self-improvement.

Summary: As a Senior / Security Engineer, you will manage security incidents, conduct threat hunting with SIEM/SOAR tools, and support IT audits. You will oversee vulnerability assessments, security training, and IT security for vessels. You will also lead security projects, provide advisory for projects, and engage with external parties on cyber threats.

Reports to: Senior Security Manager

Role and Responsibilities:

Security Incidents

• Perform investigations of Security incidents.
• Perform threat hunting using SIEM and SOAR tools.
• SIEM/SOAR Tools: Hands-on experience with security monitoring tools like Microsoft Sentinel or other relevant SIEM and SOAR platforms.

Audit and Governance

• Participate in internal and external IT audits.
• Maintain Incident Response Plans and IT policies.
• Perform Vulnerability Assessment and Penetration Testing.
• Conduct Security awareness training for the organization.
• Conduct phishing campaigns.
• Design and review IT/Cyber security architectures.
• Works with external parties (eg; CSA, MPA) on the latest cyber threats and trends.
• Assist in vessel IT security setup, review, audit and remedial actions.

Projects

• Manages Security related projects.
• Acts as Security Advisory for all projects.
• Participate in Request for Proposal and Request for Quote process.

Requirements:

• Degree in Information Security, Computer Science or related disciplines with at least 3 years of relevant experience.
• Knowledgeable in IT Security, Cloud Security, and security standards such as NIST, ISO 27000 and IMO.
• Azure Cloud Security: Strong expertise in Azure Security Center, Microsoft Defender for Cloud, and Azure Policy for real-time cloud threat management and compliance.
• IT Security Management experience of various aspects, e.g. network security, server security, application security, end point security, email security, physical access security, logical access security, etc will be an advantage.
• Knowledge managing network security devices (NextGen Firewalls, IDS, IPS, UTM, NAC, AV, etc.), Windows, Linux, and networking services will be an advantage.
• Preferred Certifications: CCSP (Certified Cloud Security Professional) and Azure Security Engineer Associate are highly preferred, in addition to other certifications such as CISSP, CISM, or CEH.
• Strong hands-on knowledge and experience with security architecture and implementation of Azure Cloud Computing (IaaS, Containers, AKS, DevOps, CI/CD) is mandatory.
• Proficiency in automating security workflows within CI/CD pipelines, focusing on Azure DevOps integration.
• Ideally completed 2 or more of the following certifications: SC-200, SC-300, AZ-500, MS-500 and SC-100.
• Knowledge of Vessel IT will be an advantage.
• Maritime Cybersecurity: Familiarity with maritime cybersecurity standards such as IMO guidelines and TMSA (Tanker Management and Self-Assessment) is a strong advantage for vessel IT security.